← Database

CVE-2026-128886

MEDIUM CVSS: 6.2 Published: 2026-11-13 Modified: 2026-11-13

Description

A flaw was found in dbus when configured with the nonce-tcp transport. An unauthenticated attacker able to connect to an exposed listener can cause a Denial of Service (DoS) by opening a connection and withholding the expected authentication token. Because the server processes this verification without enforcing a timeout, the stalled connection blocks the accept process and prevents legitimate clients from establishing new connections.

Affected Platforms

Unknown

Weakness Type

CWE-1322

References